IN THE CLAIMS 



Please cancel claims 4-12. 



1 1 . (Original) An apparatus comprising: 

2 at least one processor; 

3 a memory coupled to the at least one processor; 

4 a directory service server that accesses a directory that has a plurality of entries, 

5 the plurality of entries including at least one proxy entry that contains security 

6 information for a corresponding protected resource, the directory service server including 

7 authentication and authorization functions that determine whether a selected one of the 

8 plurality of entries may be accessed; 

9 a plurality of protected resources that are not stored or contained within the 

10 directory; 

11 an application residing in the memory and executed by the at least one processor, 



12 the application including a logical mapping that correlates each protected resource with a 

13 corresponding proxy entry, the application determining whether the application is 

14 authorized to access a selected protected resource by invoking the authentication and 

15 authorization functions in the directory service server to determine whether the proxy 

16 entry corresponding to the selected resource may be accessed, and if so, the application 

1 7 accesses the selected protected resource. 

1 2. (Original) The apparatus of claim 1 wherein the directory service server is a 

2 Lightweight Directory Access Protocol (LDAP) server, and wherein the directory is an 

3 LDAP directory. 



2 



1 3. (Original) The apparatus of claim 1 wherein the application does not access the 

2 selected protected resource if the proxy entry corresponding to the selected resource 

3 cannot be accessed. 
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3 



